$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa File: 48dc100e-8d7e-3d30-90c2-6334f2764387.roa (raw, json) Hash identifier: fDTFg/3xWZbKBOh9s+DDY609zF9LC0u9c7SXk8XV1Aw= Subject key identifier: 27:4B:4B:84:D7:6D:9B:27:15:10:A4:54:2A:7C:95:A8:FA:99:F8:75 Certificate issuer: /CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Certificate serial: 010D0C9F43285849C20A21DA9332B76627C09940 Authority key identifier: 85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 63199 IP address blocks: 148.153.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:21:da:93:32:b7:66:27:c0:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c84588e2-c0d9-4138-92a4-d2b3a75a1aa7 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=685e2301-171a-450c-8cd1-d79f3ba7da61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:14:8e:12:68:47:7e:b7:51:64:96:fe:ce:71: d5:18:69:e8:c8:de:65:4c:32:af:86:4b:d3:21:59: 45:00:e8:7b:a6:e7:3f:a3:19:a8:c4:9f:64:e6:dc: c9:36:9b:bc:11:f2:a0:ea:e5:a1:07:01:ab:2e:9d: 31:f1:90:1b:fa:69:3e:7a:f0:a3:80:70:f8:a9:3e: eb:58:0f:6c:2c:6b:30:2c:9b:b8:99:08:75:66:d1: c1:4b:d8:12:8b:98:6a:f8:35:58:2b:4b:1a:ce:51: d9:ea:94:f1:26:12:6a:25:8a:a1:8b:fc:a4:99:04: e8:e3:39:e4:0b:b9:81:fe:a5:b9:ab:d4:a5:3b:8b: c5:97:29:88:9c:ce:25:dc:f4:d8:50:83:79:11:f7: d7:f5:ea:01:b6:e8:16:36:eb:51:b6:50:4c:13:bf: 94:3f:a2:49:e6:7a:57:42:9e:d1:0a:51:73:c4:cc: b9:9b:ef:f4:df:f3:7f:be:32:9d:d3:53:ad:a1:69: 9c:c2:9e:f3:d8:0b:e5:3b:57:eb:a5:e0:23:f7:a6: 0d:94:22:de:7a:d4:98:6e:f4:bd:9b:18:60:00:8b: a2:35:bf:49:1f:e5:c4:7d:5d:62:0e:85:29:3b:f4: e9:b3:51:89:ac:a7:cf:cb:47:3b:d2:62:5e:5c:c6: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4B:4B:84:D7:6D:9B:27:15:10:A4:54:2A:7C:95:A8:FA:99:F8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/48dc100e-8d7e-3d30-90c2-6334f2764387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.crl X509v3 Authority Key Identifier: keyid:85:3E:35:4B:7F:CC:3D:14:BF:88:B2:27:58:B5:44:F0:6B:11:4C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c84588e2-c0d9-4138-92a4-d2b3a75a1aa7.cer sbgp-ipAddrBlock: critical IPv4: 148.153.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:84:e9:74:37:c3:87:82:48:44:62:e2:e5:25:ac:5f:09:1d: 23:1b:4e:c5:c2:e3:35:29:99:16:5d:ac:df:9b:35:c2:fd:b4: 67:16:84:cc:f9:a5:a4:cf:23:07:fc:18:4b:dc:da:67:d2:c6: bc:03:7b:8f:eb:4e:06:91:62:4a:ca:cb:45:11:db:2e:e1:a2: d9:b0:46:a2:13:b5:dc:1d:5e:51:ad:41:32:ec:37:06:43:67: 0e:0b:0a:92:90:cf:59:7b:c7:55:2f:24:77:ad:84:b7:4e:cf: e2:9d:67:59:cc:7f:7d:7c:66:a6:b5:2f:2b:d5:a6:2c:13:cd: c4:64:ab:05:03:90:08:44:a5:91:12:82:40:54:7a:5d:a3:34: 52:f9:b4:cc:91:3f:b8:cd:bc:00:89:94:86:52:2b:7b:00:15: 8a:b8:7d:18:59:40:d6:b4:30:15:2e:cc:86:4c:45:79:4b:94: d6:16:c7:72:51:a8:6f:0a:4c:96:a6:b7:fa:c2:f8:2a:01:ab: 9a:a0:4a:6f:f0:4b:83:f8:02:3c:6d:13:b7:0d:56:13:26:04: 98:4e:35:44:1e:28:9d:10:99:52:3c:84:c8:20:20:d0:99:6a: 5f:ee:09:15:3f:2b:ec:e1:17:87:90:82:1a:e7:b9:e0:ce:21: 92:c7:5c:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCiHakzK3ZifAmUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg0NTg4ZTItYzBkOS00MTM4LTkyYTQtZDJiM2E3NWEx YWE3MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk Njg1ZTIzMDEtMTcxYS00NTBjLThjZDEtZDc5ZjNiYTdkYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBSOEmhHfrdRZJb+znHVGGnoyN5lTDKvhkvT IVlFAOh7puc/oxmoxJ9k5tzJNpu8EfKg6uWhBwGrLp0x8ZAb+mk+evCjgHD4qT7r WA9sLGswLJu4mQh1ZtHBS9gSi5hq+DVYK0sazlHZ6pTxJhJqJYqhi/ykmQTo4znk C7mB/qW5q9SlO4vFlymInM4l3PTYUIN5EffX9eoBtugWNutRtlBME7+UP6JJ5npX Qp7RClFzxMy5m+/03/N/vjKd01OtoWmcwp7z2AvlO1frpeAj96YNlCLeetSYbvS9 mxhgAIuiNb9JH+XEfV1iDoUpO/Tps1GJrKfPy0c70mJeXMZkQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdLS4TXbZsnFRCkVCp8laj6mfh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1 ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIzYTc1YTFhYTcvNDhkYzEwMGUtOGQ3ZS0z ZDMwLTkwYzItNjMzNGYyNzY0Mzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzg0NTg4ZTItYzBkOS00MTM4LTky YTQtZDJiM2E3NWExYWE3L2M4NDU4OGUyLWMwZDktNDEzOC05MmE0LWQyYjNhNzVh MWFhNy5jcmwwHwYDVR0jBBgwFoAUhT41S3/MPRS/iLInWLVE8GsRTIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jODQ1ODhlMi1jMGQ5LTQxMzgtOTJhNC1kMmIz YTc1YTFhYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlJnaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2E6XQ3w4eCSERi4uUlrF8JHSMbTsXC4zUpmRZdrN+bNcL9tGcWhMz5 paTPIwf8GEvc2mfSxrwDe4/rTgaRYkrKy0UR2y7hotmwRqITtdwdXlGtQTLsNwZD Zw4LCpKQz1l7x1UvJHethLdOz+KdZ1nMf318Zqa1LyvVpiwTzcRkqwUDkAhEpZES gkBUel2jNFL5tMyRP7jNvACJlIZSK3sAFYq4fRhZQNa0MBUuzIZMRXlLlNYWx3JR qG8KTJamt/rC+CoBq5qgSm/wS4P4AjxtE7cNVhMmBJhONUQeKJ0QmVI8hMggINCZ al/uCRU/K+zhF4eQghrnueDOIZLHXDU= -----END CERTIFICATE-----Generated at Mon May 12 02:23:13 2025 by rpki-client